IPSEC or not [Re: Identifiers]

[Brian E Carpenter <brc@zurich.ibm.com>]

marcelo bagnulo wrote:
> 
> Hi Erik,
...
> > Changing topics, I am confused (perhaps because I am a newbie on
> > this list)
> > by the earlier discussion about authentication and authorization. I
> > would have thought that we would be using IPSec (whether AH or ESP) for
> > situations requiring authentication at the network layer. Is
> > there a reason
> > why we aren't use IPSec but rather need an alternative network
> > layer provision?
> 
> HIP uses IPSec ESP headers, but some others solutions use alternative
> formats, for optimization, for instance

At the moment we are trying to reach an architectural view - i.e. what do
we need to authenticate, if anything? Whether we use HIP or IPSEC is a
solution-space choice, for a little bit later.

   Brian